Vouch is an open-source community trust management system that introduces an explicit vouching model to govern who is allowed to contribute to a project’s critical interactions, such as opening issues or submitting pull requests. Traditional open source has relied on implicit trust earned through effort, but the advent of AI-generated low-quality contributions has made maintainers seek more intentional vetting processes. With Vouch, existing trusted contributors explicitly “vouch” for new community members before they can participate in selected parts of the project, and they can also “denounce” users to block them should they act in bad faith. The system stores trust decisions in a simple flat file format that integrates easily with version control and can be parsed using standard tools, making the trust layer lightweight and transparent.
Features
- Explicit vouch/denounce contributor trust model
- Integrates with GitHub Actions for automated gating
- Simple flat file format without external dependencies
- Web of trust capability across projects
- Reduces low-quality or spam contributions
- Configurable rules for different parts of a repository
Project Samples
